Title :
EWMA Statistic in Adaptive Threshold Algorithm
Author :
Cisar, P. ; Cisar, S. Maravic
Author_Institution :
Telekom Srbija, Subotica
fDate :
June 29 2007-July 2 2007
Abstract :
Intrusion detection is used to monitor and capture intrusions into computer and network systems which attempt to compromise the security of computer and network systems. Many intrusions manifest in dramatic changes in the intensity of events occurring in information systems. Because of the ability of exponentially weighted moving average (EWMA) control charts to monitor the rate of occurrences of events based on their intensity, this technique is widely used in intrusion detection systems (IDS). One of the applications of this technique is in adaptive threshold algorithm. The performance of this method is in function of several parameters. This paper describes an approach to their choice.
Keywords :
computer networks; control charts; statistical analysis; telecommunication control; telecommunication security; telecommunication traffic; EWMA control charting technique; EWMA statistic; adaptive threshold algorithm; computer systems; exponentially weighted moving average control charts; intrusion detection systems; malicious network statistical anomaly detection; network systems; traffic usage; Computer networks; Computer security; Computerized monitoring; Control charts; Educational institutions; Information security; Intrusion detection; Smoothing methods; Statistics; Yttrium;
Conference_Titel :
Intelligent Engineering Systems, 2007. INES 2007. 11th International Conference on
Conference_Location :
Budapest
Print_ISBN :
1-4244-1147-5
Electronic_ISBN :
1-4244-1148-3
DOI :
10.1109/INES.2007.4283671
